feat: h5ai 0.30.0 with PHP 8.4.26 security patch for PHP2Shell

2026-10-21 21:45:49 +02:00
parent 3568d43858
commit e6536444ad
133 changed files with 4363 additions and 29 deletions
@@ -0,0 +1,44 @@
+FROM nginx:alpine
+LABEL maintainer="Patrick Asmus <patrick@techniverse.net>" \
+      description="Lightweight h5ai 0.30.0 container with Nginx & PHP 8.4 (security patched) based on Alpine Linux."
+
+RUN echo "https://dl-cdn.alpinelinux.org/alpine/edge/community" >> /etc/apk/repositories && \
+    echo "https://dl-cdn.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \
+    apk update && \
+    apk add --no-cache \
+        bash bash-completion supervisor tzdata shadow \
+        php84 php84-fpm php84-session php84-xml php84-mbstring php84-exif \
+        php84-intl php84-gd php84-pecl-imagick php84-zip php84-opcache \
+        ffmpeg imagemagick zip apache2-utils patch
+
+# Environments
+ENV PUID=911
+ENV PGID=911
+ENV TZ='Europe/Berlin'
+ENV HTPASSWD='false'
+ENV HTPASSWD_USER='guest'
+ENV HTPASSWD_PW=''
+
+# Copy configuration files
+COPY config/h5ai.conf /etc/nginx/conf.d/h5ai.conf
+COPY config/php_set_timezone.ini /etc/php84/conf.d/00_timezone.ini
+COPY config/php_set_jit.ini /etc/php84/conf.d/00_jit.ini
+COPY config/php_set_memory_limit.ini /etc/php84/conf.d/00_memlimit.ini
+COPY config/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+# Copy h5ai
+COPY config/_h5ai /usr/share/h5ai/_h5ai
+
+# Configure Nginx server
+RUN sed --in-place=.bak 's/worker_processes  1/worker_processes  auto/g' /etc/nginx/nginx.conf && \
+    rm -f /etc/nginx/conf.d/default.conf
+
+# Add shell script, patch files
+ADD config/init.sh /
+ADD config/h5ai.conf.htpasswd.patch /
+# Set entry point file permission
+RUN chmod a+x /init.sh
+
+EXPOSE 80
+VOLUME [ "/config", "/h5ai" ]
+ENTRYPOINT [ "/init.sh" ]